Php and strings inside code

Question

I have one code , when execute this code i let do other thing , for example :

<?php

if ($ending=="ok")
{
    $insert_end="ok";
}  

if ($insert_end=="ok")
{
    print "ok";
}

?>

But if i go the url and put for example :

http://www.domain.com/index.php?insert_end=ok

Execute the code and i don´t want this be possible because if some people know this can execute the code , it´s possible no let execute the code when put in url

Thank´s Regards

Yes the controller if all ok put $insert_end="ok"; but if i put the same in the url execute all , also , by this my question if it´s possible no let this inside url , thank´s — user3626084
– user3626084, Commented Jun 7, 2014 at 19:19
Don't do $insert_end = $_GET['insert_end'] if you don't want the user to be able to set it. — Barmar
– Barmar, Commented Jun 7, 2014 at 19:22

Niet the Dark Absol · Accepted Answer · 2014-06-07 19:23:46Z

2

Disable register_globals in your php.ini file. It should not be used for exactly this reason.

answered Jun 7, 2014 at 19:23

Niet the Dark Absol

326k86 gold badges480 silver badges604 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Maerlyn Over a year ago

It's also worth noting that an upgrade is advisable, register_globals was removed in 5.4.

user3626084 Over a year ago

I have disable register globals and when y send by url this , always execute in the internal code

Prasanth · Accepted Answer · 2014-06-07 19:24:04Z

0

From what I could understand, try this:

if ($insert_end=="ok" && !array_key_exists('insert_end', $_GET))
{
    print "ok";
}

answered Jun 7, 2014 at 19:24

Prasanth

5,2962 gold badges31 silver badges62 bronze badges

Collectives™ on Stack Overflow

Php and strings inside code

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related